What’s Vulnerable › Vulnerabilities

CVE-2018-0734: Timing attack against DSA

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 12.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-10-30 · updated 2026-10-08
• Weakness: CWE-327

Description

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).

Affected products

• Canonical Ubuntu Linux: 14.04, 16.04, 18.04, 18.10
• Debian Linux: 9.0
• NetApp Cloud Backup: all versions
• NetApp Cn1610 Firmware: all versions
• NetApp OnCommand Unified Manager for 7-Mode (core package): all versions
• NetApp Santricity Smi-S Provider: all versions
• NetApp SnapCenter: all versions
• NetApp Steelstore: all versions
• NetApp Storage Automation Store: all versions
• Node.js: from 6.0.0 through 6.8.1; from 6.9.0 before 6.15.0; from 8.0.0 through 8.8.1; from 8.9.0 before 8.14.0; from 10.0.0 through 10.12.0; from 11.0.0 before 11.3.0 — fixed in 11.3.0, 6.15.0, 8.14.0
• OpenSSL: from 1.0.2 through 1.0.2p; from 1.1.0 through 1.1.0i; 1.1.1
• Oracle Corporation API Gateway: 11.1.2.4.0
• Oracle Corporation E-Business Suite Technology Stack: 0.9.8, 1.0.0, 1.0.1
• Oracle Corporation Enterprise Manager Base Platform: 12.1.0.5.0, 13.2.0.0.0, 13.3.0.0.0
• Oracle Corporation Enterprise Manager Ops Center: 12.3.3
• Oracle Mysql Enterprise Backup: from 3.0 through 3.12.3; from 4.0 through 4.1.2
• Oracle Corporation PeopleSoft Enterprise PT PeopleTools: 8.55, 8.56, 8.57
• Oracle Primavera P6 Professional Project Management: from 17.7 through 17.12; 8.4, 15.1, 15.2, 16.1, 16.2, 18.8
• Oracle Corporation Tuxedo: 12.1.1.0.0

How to fix

Upgrade to a fixed version: Node.js 11.3.0, 6.15.0, 8.14.0. Check the vendor advisory for mitigations.

References

• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html
• http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html
• http://www.securityfocus.com/bid/105758
• https://access.redhat.com/errata/RHSA-2019:2304
• https://access.redhat.com/errata/RHSA-2019:3700
• https://access.redhat.com/errata/RHSA-2019:3932
• https://access.redhat.com/errata/RHSA-2019:3933
• https://access.redhat.com/errata/RHSA-2019:3935
• https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=43e6a58d4991a451daf4891ff05a48735df871ac
• https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8abfe72e8c1de1b95f50aa0d9134803b4d00070f
• https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ef11e19d1365eea2b1851e6f540a0bf365d303e7
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/

Get alerted when CVE-2018-0734 or the next vulnerability affects your stack